Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/323830333a6538303a3a2f33322d3332203d3e20323632313931.roa
File:                     323830333a6538303a3a2f33322d3332203d3e20323632313931.roa (raw, json)
Hash identifier:          a2rhImr/Ew4Ih8VC5i1u+Ljcb8oApY2TC8ppC0VhATs=
Subject key identifier:   D8:B8:04:3A:AC:B3:01:3F:8A:4E:5C:FA:27:72:3D:17:AD:3B:FB:19
Certificate issuer:       /CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
Certificate serial:       1A94FC29D1F8F38507B74B0A02A55BBDC39C1CAC
Authority key identifier: 85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/323830333a6538303a3a2f33322d3332203d3e20323632313931.roa
Signing time:             Tue 02 Jun 2026 22:46:17 +0000
ROA not before:           Tue 02 Jun 2026 22:41:17 +0000
ROA not after:            Tue 01 Jun 2027 22:46:17 +0000
asID:                     262191
IP address blocks:        2803:e80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl
                          rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 17 Jun 2026 16:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:94:fc:29:d1:f8:f3:85:07:b7:4b:0a:02:a5:5b:bd:c3:9c:1c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B7D9685BA8DA2D6F481C323611ED64944F6273
        Validity
            Not Before: Jun  2 22:41:17 2026 GMT
            Not After : Jun  1 22:46:17 2027 GMT
        Subject: CN=D8B8043AACB3013F8A4E5CFA27723D17AD3BFB19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cb:a0:65:0d:43:a5:6c:f4:29:48:9f:22:fb:
                    c8:19:12:be:89:e7:bd:e4:65:27:a4:f9:52:de:54:
                    29:de:12:07:ab:ea:31:b7:a0:50:89:e9:7f:1a:fa:
                    7e:bd:27:ff:8e:20:4d:5f:e6:6d:0f:59:97:73:d4:
                    07:0a:f4:56:c3:1a:c6:2a:ae:c7:6f:74:9c:83:cd:
                    ac:f7:bd:96:55:02:4f:8f:83:23:f5:2d:26:f7:79:
                    8f:e5:5f:1d:1a:06:c9:cd:23:46:38:e2:aa:cb:92:
                    de:12:b0:5b:c1:a9:fc:55:6e:46:93:fd:a5:14:f7:
                    25:b4:82:af:a0:56:bd:39:70:82:e9:9b:c3:f7:1f:
                    bc:9c:ab:cf:03:3c:fd:83:e9:f9:d6:ff:0f:9a:d0:
                    26:e2:5c:bd:5f:fa:7a:96:ef:4e:43:43:5f:e4:af:
                    b6:cb:bc:53:d9:ea:aa:fd:0d:6c:c7:34:80:63:3e:
                    75:7d:07:03:93:84:85:7c:18:7e:46:78:35:16:45:
                    30:50:43:cc:a2:6d:70:b9:3d:27:ae:de:86:eb:56:
                    81:eb:d6:63:03:c3:13:d4:ed:10:cd:64:c5:5d:32:
                    ac:63:09:81:6b:7f:f8:04:8c:16:36:65:b5:0e:b5:
                    ef:5a:a4:10:24:58:f3:52:4b:51:aa:c3:e3:68:0a:
                    7c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B8:04:3A:AC:B3:01:3F:8A:4E:5C:FA:27:72:3D:17:AD:3B:FB:19
            X509v3 Authority Key Identifier:
                keyid:85:B7:D9:68:5B:A8:DA:2D:6F:48:1C:32:36:11:ED:64:94:4F:62:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85B7D9685BA8DA2D6F481C323611ED64944F6273.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/317E94E3ECFEA74BED41FBB306A71B3CA8E717FF7BAB86F4CB4B3A5CF709964C/0/323830333a6538303a3a2f33322d3332203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:d6:a7:3c:0f:4f:11:48:1b:5c:e4:17:65:35:f2:31:15:af:
         89:a5:b9:81:a0:a3:98:37:d4:34:90:b2:c8:9a:f9:fa:56:a4:
         21:3f:69:90:33:c5:49:dc:2c:42:a3:2c:6c:95:13:25:e0:80:
         e2:05:b6:c1:58:7d:f2:1a:8a:62:d5:fd:63:be:5c:5a:4c:95:
         c6:86:60:39:5a:ea:57:b3:ba:cf:c4:9d:de:ee:a2:d9:58:a1:
         5b:88:f7:38:fe:66:80:be:2d:07:19:cd:c2:2e:c4:61:84:b0:
         5c:2a:0b:03:58:ee:bc:ce:d6:d1:e7:5d:8b:b5:c8:ed:f6:37:
         54:f6:0b:34:cc:7f:9c:5f:2a:86:67:52:85:91:f1:27:9d:d9:
         e9:05:b4:57:69:d7:c9:f5:0e:4c:20:b2:9f:7e:89:fb:31:99:
         dd:ed:c1:08:ba:10:fb:d7:7a:44:9d:0a:88:57:87:78:9c:a4:
         cb:89:5a:e4:5a:bf:7f:46:23:2c:c7:27:50:dd:28:68:81:c5:
         3c:5b:4c:cf:f5:39:ec:96:cf:5f:85:96:49:50:6c:02:10:b6:
         9f:93:fd:5f:23:f3:84:bc:c8:84:b0:9f:58:90:87:28:17:09:
         5f:db:35:e2:59:8c:fd:22:31:aa:03:ad:d3:87:8c:cd:40:91:
         69:88:30:b2
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUGpT8KdH484UHt0sKAqVbvcOcHKwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVCN0Q5Njg1QkE4REEyRDZGNDgxQzMyMzYxMUVENjQ5
NDRGNjI3MzAeFw0yNjA2MDIyMjQxMTdaFw0yNzA2MDEyMjQ2MTdaMDMxMTAvBgNV
BAMTKEQ4QjgwNDNBQUNCMzAxM0Y4QTRFNUNGQTI3NzIzRDE3QUQzQkZCMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVy6BlDUOlbPQpSJ8i+8gZEr6J
573kZSek+VLeVCneEger6jG3oFCJ6X8a+n69J/+OIE1f5m0PWZdz1AcK9FbDGsYq
rsdvdJyDzaz3vZZVAk+PgyP1LSb3eY/lXx0aBsnNI0Y44qrLkt4SsFvBqfxVbkaT
/aUU9yW0gq+gVr05cILpm8P3H7ycq88DPP2D6fnW/w+a0CbiXL1f+nqW705DQ1/k
r7bLvFPZ6qr9DWzHNIBjPnV9BwOThIV8GH5GeDUWRTBQQ8yibXC5PSeu3obrVoHr
1mMDwxPU7RDNZMVdMqxjCYFrf/gEjBY2ZbUOte9apBAkWPNSS1Gqw+NoCnyPAgMB
AAGjggLHMIICwzAdBgNVHQ4EFgQU2LgEOqyzAT+KTlz6J3I9F607+xkwHwYDVR0j
BBgwFoAUhbfZaFuo2i1vSBwyNhHtZJRPYnMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMTdFOTRFM0VDRkVBNzRCRUQ0MUZCQjMwNkE3MUIzQ0E4
RTcxN0ZGN0JBQjg2RjRDQjRCM0E1Q0Y3MDk5NjRDLzAvODVCN0Q5Njg1QkE4REEy
RDZGNDgxQzMyMzYxMUVENjQ5NDRGNjI3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUI3RDk2ODVCQThEQTJENkY0
ODFDMzIzNjExRUQ2NDk0NEY2MjczLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzE3RTk0RTNFQ0ZFQTc0QkVENDFGQkIzMDZBNzFCM0NBOEU3MTdGRjdC
QUI4NkY0Q0I0QjNBNUNGNzA5OTY0Qy8wLzMyMzgzMDMzM2E2NTM4MzAzYTNhMmYz
MzMyMmQzMzMyMjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoAw6AMA0G
CSqGSIb3DQEBCwUAA4IBAQB61qc8D08RSBtc5BdlNfIxFa+JpbmBoKOYN9Q0kLLI
mvn6VqQhP2mQM8VJ3CxCoyxslRMl4IDiBbbBWH3yGopi1f1jvlxaTJXGhmA5WupX
s7rPxJ3e7qLZWKFbiPc4/maAvi0HGc3CLsRhhLBcKgsDWO68ztbR512Ltcjt9jdU
9gs0zH+cXyqGZ1KFkfEnndnpBbRXadfJ9Q5MILKffon7MZnd7cEIuhD713pEnQqI
V4d4nKTLiVrkWr9/RiMsxydQ3ShogcU8W0zP9Tnsls9fhZZJUGwCELafk/1fI/OE
vMiEsJ9YkIcoFwlf2zXiWYz9IjGqA63Th4zNQJFpiDCy
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:34:52 2026 by rpki-client